General
- Target jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.cdf8119c8f4f606fdb83d35b56f45f9b
- Size 9.5MB
- Sample261015-db99vac13p
- SHA256 44edb14e4d26c50380ef7369128ba4dadd8c90d36354dfe099e07cdc7a216256
- MD5 cdf8119c8f4f606fdb83d35b56f45f9b
- SHA1 e8a859bebd91aa604f5cada884440eaebd7d5bc3
- SHA512 d54e92c47a1bc139e580d1b315255123de603ad104249a0cbee74be3161ce608fb17a05582c3a27ec25ee04bf4b58a276d332d6172fd948aa1d0276cad39a1c3
- SSDEEP 196608:dpD6Pyv7I9RWu40uaSPF87SjGmb61EjHkpDnMfhHqKyFGCyvPvDzgATow:dAPe7I9R5btyv1jEx08wRnDzgAUw
- TLSH T162A633839358A466D0BAC536C3F98F9F65A99C085707EB330149F47C94BFDC4AE48AC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
flash.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral5
Sample
gamebox.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral6
Sample
gamebox.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral7
Sample
gamebox.apk
Resource
android-x64-arm64-20260325-en
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.cs.cdf8119c8f4f606fdb83d35b56f45f9b
- Size 9.5MB
- SHA256 44edb14e4d26c50380ef7369128ba4dadd8c90d36354dfe099e07cdc7a216256
- MD5 cdf8119c8f4f606fdb83d35b56f45f9b
- SHA1 e8a859bebd91aa604f5cada884440eaebd7d5bc3
- SHA512 d54e92c47a1bc139e580d1b315255123de603ad104249a0cbee74be3161ce608fb17a05582c3a27ec25ee04bf4b58a276d332d6172fd948aa1d0276cad39a1c3
- SSDEEP 196608:dpD6Pyv7I9RWu40uaSPF87SjGmb61EjHkpDnMfhHqKyFGCyvPvDzgATow:dAPe7I9R5btyv1jEx08wRnDzgAUw
- TLSH T162A633839358A466D0BAC536C3F98F9F65A99C085707EB330149F47C94BFDC4AE48AC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
- Target flash.apk
- Size 4.5MB
- SHA256 76847ff9254eea8044f46a054b0cb8b338559ac8c77543b444d1b3b475d37e4c
- MD5 eab156b0fa36ee0f18487fd6e0286148
- SHA1 6d928eabc5cffbc68df19be121da5f2f22614c26
- SHA512 09205d1bac1abf4a56889bdc52c3e51b05542c2b3bb98a15286531011a0c5776f8d08ddc1988b7c4c469932f4e914ecf0201d216564aa879efa65b139e5f3f23
- SSDEEP 98304:uHgADnNemeVxd3FpqKiDVpnGv6yo4P3t9KKvDb0MgATorO:upDnMfhHqKyFGCyvPvDzgAToa
- TLSH T1582633550E68F2E1E271D03AC9FDCF1E4560652D49035DAEA1CAF9B9F28BE84F7092D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Queries information about active data network
-
- Target gamebox.apk
- Size 1.7MB
- SHA256 913d4d664cd5872f03470505f751ed1e303531d1c667497d297923acc01409fd
- MD5 fc76d2f2593de86bfb1e3f030b37e6fa
- SHA1 e27026a53a51a0823c8d4eb6b70b4d6377f530f5
- SHA512 b8a510ac6d45998e21be3d817df091123e21d73695b2059f1510491e6be818e299a80aa9b53d914f7d1160e9e920211acdfc79054360e989d366270b050a7df0
- SSDEEP 49152:N2AtOK4P7HSB1IhZNQwfyeq552L6YBoru:N2iOK48+hZNu5EmYMu
- TLSH T16585E086E789B927C877C43A46B2976666448C504757E323214DB12C8FBFEC49E89FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10